From c46c539277f890cf005b6e11524b01274f67f609 Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Tue, 10 Dec 2019 11:24:56 -0500
Subject: [PATCH] Helix - fix suricata.yml

---
 salt/suricata/files/suricata.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/salt/suricata/files/suricata.yaml b/salt/suricata/files/suricata.yaml
index 1acce5b96..093612335 100644
--- a/salt/suricata/files/suricata.yaml
+++ b/salt/suricata/files/suricata.yaml
@@ -3,6 +3,8 @@
 {%- set interface = salt['pillar.get']('sensor:interface', 'bond0') %}
 {%- if grains['role'] == 'so-eval' %}
 {%- set MTU = 1500 %}
+{%- elif grains['role'] == 'so-helix' %}
+{%- set MTU = 9000 %}
 {%- else %}
 {%- set MTU = salt['pillar.get']('sensor:mtu', '1500') %}
 {%- endif %}